[Freeswitch-users] SSL certificate and webrtc

[Craig Stevenson]

If an example helps, here what I have in my script to generate the .pem
files for FreeSWITCH to support WebRTC:

# Links to .crt and .key files
ssl_dir=${script_dir}/sc_ssl_cert
sc_crt=$ssl_dir/sc.crt
sc_key=$ssl_dir/sc.key
ca_crt=$ssl_dir/gd_bundle.crt

# create the .pem files
mkdir -p /usr/local/freeswitch/certs/
{ cat ${sc_crt}; cat ${sc_key}; cat ${ca_crt}; } >
/usr/local/freeswitch/certs/wss.pem    # CERT, KEY AND CHAIN files
{ cat ${sc_crt}; cat ${sc_key}; } > /usr/local/freeswitch/certs/agent.pem
 # CERT file AND key file
{ cat ${ca_crt}; } > /usr/local/freeswitch/certs/cafile.pem    # CHAIN file
or root CA


On Sat, Mar 5, 2016 at 4:11 AM, Brian West <brian at freeswitch.org> wrote:

> Chain is the ca, cert is your cert
>
>
> On Saturday, March 5, 2016, Gregor Nanger <gregor at infomedia.si> wrote:
>
>> Hi!
>>
>> I bought wildcard certificate for using it with freeswitch.
>>
>> Now I have hard time to install it into Freeswitch and would appreciate
>> any help.
>>
>> I have private key (generated at CSR request), certificate issued by
>> authority and root certificate from authority. Now I do not know where to
>> enter certficate. According to documentation I assume that this is correct:
>> Cert, Key and Chain(s) are all contained in a single file in this order:
>>
>> -----BEGIN CERTIFICATE-----
>> <cert>
>> -----END CERTIFICATE-----
>> -----BEGIN RSA PRIVATE KEY-----
>> <key>
>> -----END RSA PRIVATE KEY-----
>> -----BEGIN CERTIFICATE-----
>> <chain>
>> -----END CERTIFICATE-----
>>
>> What is puzzling me is if this is correct:
>> <cert> = root certificate from authority
>> <key> = private key
>> <chain> = public certificate issued by authority
>>
>> Would this work?
>>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160305/0e5a128d/attachment.html